Cisco C3201FESMIC-TP= - 3201 Fast EN Switch Mobile Interface Card Expansion Module Software Configuration Manual page 31

Overview of the Cisco WMIC
Features
The WMIC running Cisco IOS offers these software features:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
VLANs—Allow VLAN trunking on both wireless and Ethernet interfaces.
QoS—Use this feature to support quality of service (QoS) for prioritizing traffic on the wireless
interface. The WMIC supports required elements of Wi-Fi Multimedia (WMM) for QoS, which
improves the user experience for audio, video, and voice applications over a Wi-Fi wireless
connection and is a subset of the IEEE 802.11e QoS standard. WMM supports QoS prioritized media
access through the Enhanced Distributed Channel Access (EDCA) method.
Multiple Basic SSIDs—Support up to 8 basic service set identifiers (SSIDs) in access point mode.
RADIUS Accounting—Enable accounting on the WMIC to send accounting data about wireless
client devices to a RADIUS server on your network.
TACACS+ administrator authentication—Enable TACACS+ for server-based, detailed accounting
information and flexible administrative control over authentication and authorization processes. It
provides secure, centralized validation of administrators attempting to gain access to your WMIC.
Enhanced security—Enable three advanced security features to protect against sophisticated attacks
on your wireless network's WEP keys: Message Integrity Check (MIC) and WEP key hashing.
Enhanced security for Wi-Fi Protected Access (WPA) with AES and Temporal Key Integrity
Protocol (TKIP) encryption is also available.
Enhanced authentication services—Set up non-root bridges or workgroup bridges to authenticate to
the network like other wireless client devices. After a network username and password for the
non-root bridge or workgroup bridge are set, it authenticates to the network using Cisco Light
Extensible Authentication Protocol (LEAP), and receives and uses dynamic WEP keys.
802.1x supplicant—Support 802.1x, the standardized framework defined by the IEEE to provide
port-based network access using information unique to the client and with credentials known only
to the client. The supplicant refers to the client software that supports the 802.1x and EAP protocols.
The 802.1x supplicant provides a secure method for accomplishing this authentication. Transport
Layer Security (TLS) is an enhancement to SSL and provides data encryption in conjunction with
EAP.
EAP-TLS and EAP-FAST—Support EAP-TLS and EAP-FAST in workgroup bridge and non-root
device mode.
Advanced Encryption Standard (AES) —This feature supports Advanced Encryption
Standard-Counter Mode with Cipher Block Chaining Message Authentication Code Protocol
(AES-CCMP). AES-CCMP is required for Wi-Fi Protected Access 2 (WPA2) and IEEE 802.11i
wireless LAN security.
Enhanced authentication for Cisco Centralized Key Management (CCKM).
Roaming—Support fast, secure roaming of client devices, and radio management through wireless
domain services (WDS) (See the
for more information.
Universal workgroup bridge—Support interoperability with non-Cisco devices.
Prioritized Multiple Client Profiles.
Any SSID— May associate to any root device as long the encrption and authentication settings
match.
Management Frame Protection (MFP)—Support management frame protection version 1 and 2.
"WDS, Fast Secure Roaming, and Radio Management"
Cisco 3200 Series Wireless MIC Software Configuration Guide
Features
document
7